General

  • Target

    cc2c1bd1355d176678f9711f29f99ff7e2062dc220da5c4ddb9091a414bc3805

  • Size

    6.9MB

  • Sample

    231211-rfhx2sabc3

  • MD5

    b1d4cb174db6a6825e81aa6f3970c36b

  • SHA1

    57c043cf755fc55a0eb8875b91baca3b486b5145

  • SHA256

    cc2c1bd1355d176678f9711f29f99ff7e2062dc220da5c4ddb9091a414bc3805

  • SHA512

    3607eaf67595b95897dbda2c6bb66e2883b82d39c128f353e7d94eb0e00227c1bc622c30afe10aa6d73987a414cb7d47b09d22e2386cd71c533b32b1cbcc5270

  • SSDEEP

    196608:TW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:TtO/hAPmVNyEWeNzj

Score
7/10

Malware Config

Targets

    • Target

      cc2c1bd1355d176678f9711f29f99ff7e2062dc220da5c4ddb9091a414bc3805

    • Size

      6.9MB

    • MD5

      b1d4cb174db6a6825e81aa6f3970c36b

    • SHA1

      57c043cf755fc55a0eb8875b91baca3b486b5145

    • SHA256

      cc2c1bd1355d176678f9711f29f99ff7e2062dc220da5c4ddb9091a414bc3805

    • SHA512

      3607eaf67595b95897dbda2c6bb66e2883b82d39c128f353e7d94eb0e00227c1bc622c30afe10aa6d73987a414cb7d47b09d22e2386cd71c533b32b1cbcc5270

    • SSDEEP

      196608:TW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:TtO/hAPmVNyEWeNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks